AirDrop was introduced in iOS 7, which allows Apple users to transmit files between iOS and macOS systems. Moreover, this does not require an internet connection or a phone book contact for the receiver to receive files.
However, it has been reported that malicious actors have abused this feature to share illegal pictures, videos, audio, and other files in crowded places like subways, buses, or shopping malls. Due to its anonymity, it is difficult for law enforcement authorities to track these threat actors.
Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month. Delays in fixing these vulnerabilities lead to compliance issues, these delay can be minimized with a unique feature on AppTrana that helps you to get “Zero vulnerability report” within 72 hours.
Case Review
According to the reports, several people in the Beijing subway received video files with inappropriate remarks through unknown Air Drops.
Initial investigations revealed that due to its anonymity, the malicious actor utilized the AirDrop function to transfer these files to victims. However, one of the victim devices that received an unknown Airdrop was analyzed.
After several attempts, researchers found the logs for Airdrop and analyzed them further. The recorded information was found to contain the fields sender device name, mobile number, and email address, all of which were in a hash value.
Cracking the Hash
To crack the hash values, the researchers created a rainbow table with mobile numbers and email accounts to convert the hash value into original text.
Eventually, the hash values were cracked, revealing the threat actors’ mobile phone numbers and email accounts. This information was quickly shared with the law enforcement authorities, who used it to track down several suspects involved in this case.
It is recommended that people turn off their AirDrop receiving when not in use, which will prevent these kinds of activities from threatening actors.
Try Kelltron’s cost-effective penetration testing services for free to assess and evaluate the security posture of digital systems